-
Notifications
You must be signed in to change notification settings - Fork 141
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Merge seperate config schemas #57
Merge seperate config schemas #57
Conversation
assert.equal(parsed.query.redirect_uri, 'https://example.org/callback'); | ||
assert.property(parsed.query, 'nonce'); | ||
assert.property(parsed.query, 'state'); | ||
}); | ||
|
||
it('should contain the two callbacks route', function() { | ||
assert.ok(router.stack.some(filterRoute('GET', '/callback'))); | ||
assert.ok(router.stack.some(filterRoute('POST', '/callback'))); |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This was a remnant of fragment
support. id_token
with an undefined response_mode
defaults to fragment
which is not supported in this SDK.
@@ -104,7 +104,7 @@ describe('invalid parameters', function() { | |||
httpOnly: '__invalid_httponly__' |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Error message changes only in this file.
@@ -44,7 +43,7 @@ describe('logout route', function() { | |||
|
|||
it('should redirect to the base url', function() { | |||
assert.equal(logoutResponse.statusCode, 302); | |||
assert.equal(logoutResponse.headers.location, 'https://example.org/'); | |||
assert.equal(logoutResponse.headers.location, 'https://example.org'); |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
const config = getConfig(customConfig); | ||
|
||
it('should keep token code', function() { | ||
assert.equal(config.authorizationParams.response_type, 'token id_token code'); |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Does not exactly match metadata fixture so this would have thrown before.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM, just left a minor thing.
Co-Authored-By: Steve Hobbs <steve.hobbs.mail@gmail.com>
Description
appSessionCookie
schema into main config schema to remove double-processingauthorizationParams
schema into main config schema to remove double-processingresponse_type=form_post
ifresponse_mode
containstoken
orid_token
; change defaultpostLogoutRedirectUri
to not append trailing slashresponse_type
to respect content rather than exact match against issuer metadataloadEnv
functionality into config.jsclientSecret
required checks into Joiwhen()
statementsReferences